Honest answer: the spec doesn't guarantee PRF stability, and we rely on it in the web path.
Best documented case of silent drift: Apple's hybrid/QR PRF bug on iOS 18.0–18.3, fixed in 18.4. No confirmed firmware-level cases, Yubikey isn't field-updatable, Nitrokey/Solo failures are loud (credentia...